Linux kernel TPM off-by-one Overwrite

This was fixed in 2.6.30 and it was reported by Eric Paris of Red Hat on 9 June 2009. The bug affects Linux kernel from 2.6.16 and before 2.6.30 release. Here is the vulnerable routine from drivers/char/tpm/tpm_bios.c: